Measurement and Optimization of Access Control Lists

 Sándor Palugyai, Máté J. Csorba, Sarolta Dibuz, Gyula Csopaki

Abstract:

 This paper deals with the examination of Access Control Lists (ACLs) that are used in IP routers mainly for providing network admission control and maintaining a certain level of quality of service. In our work we present a method for measuring the performance impact of ACLs on the packet forwarding capabilities of a router. Besides, our study proposes new methods to model and optimize the operation and reduce the redundancy of ACLs.

Footnotes

 Ericsson Hungary Ltd., Test Competence Center, H-1117 Budapest, Irinyi J. u. 4-20. Email: {sandor.palugyai, mate.csorba, sarolta.dibuz}@ericsson.com

 Technical University of Budapest, Department of Telematics and Media Informatics Email: csopaki@tmit.bme.hu